RH
Product
Red Hat Satellite 6.16 for RHEL 8
32
CVEs
0
On KEV
9.8
Max CVSS
11
New 30D
Severity mix
Critical 6High 17Medium 9Low 0
Watch
Add Red Hat Satellite 6.16 for RHEL 8 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12545 | 6.7 | Oct 1 | Rubygem-hammer_cli: command injection via insecure editor invocation Affected: All versions, or not specified |
| CVE-2026-56097 | 6.5 | Oct 1 | Rubygem-katello: sql injection in registry proxy via labels Affected: All versions, or not specified |
| CVE-2026-5135 | 6.5 | Jul 1 | Foreman: foreman: unauthorized modification of host configurations via broken access control Affected: All versions, or not specified |
| CVE-2026-5142 | 6.5 | Jul 1 | Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass Affected: All versions, or not specified |
| CVE-2026-27145 | 6.5 | Jun 2 | Inefficient candidate hostname parsing in crypto/x509 Affected: All versions, or not specified |
| CVE-2026-56098 | 4.3 | Oct 1 | Rubygem-katello: improper authorization logic allows resource enumeration Affected: All versions, or not specified |
| CVE-2026-79654 | 4.3 | Aug 26 | Ketello: katello content view history api cross-organization authorization bypass Affected: All versions, or not specified |
| CVE-2026-5138 | 4.3 | Jul 1 | Foreman: foreman: information disclosure via improper validation of nested request parameters Affected: All versions, or not specified |
| CVE-2026-12515 | 4.3 | Jun 17 | Katello: missing repository authorization in content_uploads exposes cross-product content existence Affected: All versions, or not specified |
Showing 9